3 ms·
Docker hub is a centralized service. What we are seeing is the result of having a huge centralized service: if it gets compromised, then many dependencies are c
by friedrichg 7y ago
Docker hub is a centralized service. What we are seeing is the result of having a huge centralized service: if it gets compromised, then many dependencies are compromised.
Some organizations took the risk of running docker taking images directly from docker hub. They were relaying the security of the images to them.
Some organizations are going to panic now and host their own registry. Which they need to protect as well. But in general it will create a better decentralized ecosystem.
I think this is good for the docker community in general.
- gigatexal 7y agoWe run our own registry that just mirrors images that we want to use and keeps them up to date. It’s not a silver bullet but it works.
- turtlebait 7y agoI'd worry about mirroring the images because of cases like this, you'd want some sort of triage process before it gets into your environment.